NetApp ASA C Series Install page 17

◦ If the Key Manager
yes, you need to complete some additional steps.
2. If the
Key Manager
the OKM information:
a. Go to advanced privilege mode and enter
b. Enter the command to display the key management information:
show-backup
c. Copy the contents of the backup information to a separate file or your log file. You'll need it in disaster
scenarios where you might need to manually recover OKM.
d. Return to admin mode:
e. Shut down the impaired controller.
3. If the
Key Manager
yes:
a. Restore the external key management authentication keys to all nodes in the cluster:
manager external restore
If the command fails, contact NetApp Support.
mysupport.netapp.com
b. Verify that the
Restored
key query
c. Shut down the impaired controller.
4. If the
Key Manager
a. Enter the onboard security key-manager sync command:
Enter the customer's 32 character, alphanumeric onboard key management passphrase
at the prompt. If the passphrase cannot be provided, contact NetApp Support.
mysupport.netapp.com
b. Verify the
Restored
query
c. Verify that the
Key Manager
d. Go to advanced privilege mode and enter
e. Enter the command to display the key management backup information:
onboard show-backup
f. Copy the contents of the backup information to a separate file or your log file. You'll need it in disaster
scenarios where you might need to manually recover OKM.
g. Return to admin mode:
h. You can safely shut down the controller.
type displays onboard
type displays
onboard
set -priv admin
type displays
external
column equals
type displays
onboard
column shows
yes
type shows onboard, and then manually back up the OKM information.
set -priv admin
and the Restored
and the column displays yes, manually back up
Restored
when prompted to continue:
y
and the column displays anything other than
Restored
for all authentication keys:
yes
and the column displays anything other than yes:
Restored
security key-manager onboard sync
for all authentication keys:
when prompted to continue:
y
column displays anything other than
set -priv advanced
security key-manager onboard
security key-
security key-manager
security key-manager key
set -priv advanced
security key-manager
15